CVE-2026-28744

Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository token scope checks.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://blog.gitea.com/release-of-1.26.2/
https://github.com/go-gitea/gitea/pull/37583
https://github.com/go-gitea/gitea/releases/tag/v1.26.2
https://github.com/go-gitea/gitea/security/advisories/GHSA-cc8w-r4qh-3v65
https://github.com/go-gitea/gitea/security/advisories/GHSA-cc8w-r4qh-3v65

Configurations

No configuration.

History

25 Oct 2026, 15:10

Type	Values Removed	Values Added
Summary		(es) Las versiones de Gitea hasta la 1.26.1 inclusive permiten que las solicitudes HTTP inteligentes de Git autenticadas con tokens de portador omitan las comprobaciones de alcance de los tokens del repositorio.

Information

Published : 2026-07-03 21:17

Updated : 2026-10-25 15:10

NVD link : CVE-2026-28744

Mitre link : CVE-2026-28744

CVE.ORG link : CVE-2026-28744

JSON object : View

Products Affected

No product.

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2026-28744", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-28744", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-06T15:17:54.973827Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "88ee5874-cf24-4952-aea0-31affedb7ff2", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "88ee5874-cf24-4952-aea0-31affedb7ff2", "affectedData": [{"vendor": "Gitea", "product": "Gitea Open Source Git Server", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.26.1"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-03T21:17:00.003", "references": [{"url": "https://blog.gitea.com/release-of-1.26.2/", "source": "88ee5874-cf24-4952-aea0-31affedb7ff2"}, {"url": "https://github.com/go-gitea/gitea/pull/37583", "source": "88ee5874-cf24-4952-aea0-31affedb7ff2"}, {"url": "https://github.com/go-gitea/gitea/releases/tag/v1.26.2", "source": "88ee5874-cf24-4952-aea0-31affedb7ff2"}, {"url": "https://github.com/go-gitea/gitea/security/advisories/GHSA-cc8w-r4qh-3v65", "source": "88ee5874-cf24-4952-aea0-31affedb7ff2"}, {"url": "https://github.com/go-gitea/gitea/security/advisories/GHSA-cc8w-r4qh-3v65", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "88ee5874-cf24-4952-aea0-31affedb7ff2", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository token scope checks."}, {"lang": "es", "value": "Las versiones de Gitea hasta la 1.26.1 inclusive permiten que las solicitudes HTTP inteligentes de Git autenticadas con tokens de portador omitan las comprobaciones de alcance de los tokens del repositorio."}], "lastModified": "2026-10-25T15:10:00.147", "sourceIdentifier": "88ee5874-cf24-4952-aea0-31affedb7ff2"}